EasySSO Get it

Privacy Policy

Last updated: 3 May 2026

EasySSO is designed so that all sensitive data — your AWS configuration and credentials — stays on your Mac. This page summarises what EasySSO does and does not do with your data.

What data EasySSO reads

  • ~/.aws/config — to list your SSO profiles.
  • ~/.aws/credentials — to read and write the credentials issued after each login.
  • ~/.aws/sso/cache/ — the standard AWS SSO token cache, shared with the AWS CLI.

What EasySSO sends to AWS

When you click a profile, EasySSO performs the standard AWS SSO OAuth device authorization flow. The only network requests it makes are to AWS endpoints (sso-oidc, sso, sts) for the region of the profile you selected.

What EasySSO does not do

  • No analytics, telemetry, or crash reporting is collected.
  • No account is required.
  • No data is sent to the developer or any third party.

Contact

Questions about this policy? Email mariusbackes@icloud.com.